PT-2018-1478 · Microsoft · Sql Server

Publicado 2018-08-14 · Atualizado 2025-12-13 · CVE-2018-8273

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server (affected versions not specified)

Description A buffer overflow issue exists that could allow remote code execution on an affected system. An attacker who successfully exploits this issue could execute code in the context of the SQL Server Database Engine service account. To exploit the issue, an attacker would need to submit a specially crafted query to an affected SQL server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-119

CWE-787

Identificadores relacionados

BDU:2018-01029

CVE-2018-8273

Produtos afetados

Sql Server

Referências · 10

• https://bdu.fstec.ru/vul/CVE-2018-8273 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8273 · Nota
• http://securitytracker.com/id/1041467 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8273 · Aviso do Fabricante
• https://t.me/cvenotify/20739 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2018-01029 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8273 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8273 · Nota de Segurança
• http://securityfocus.com/bid/104967 · Nota